EUVD-2025-23957

Malicious code in bioql PyPI...

EUVD-2025-9187

Malicious code in bioql PyPI...

EUVD-2025-6939

Malicious code in bioql PyPI...

EUVD-2024-16248

Malicious code in bioql PyPI...

EUVD-2024-44436

Malicious code in bioql PyPI...

EUVD-2024-53177

Malicious code in bioql PyPI...

EUVD-2025-6656

Malicious code in bioql PyPI...

EUVD-2025-7563

Malicious code in bioql PyPI...

EUVD-2024-38530

Malicious code in bioql PyPI...

EUVD-2025-6651

Malicious code in bioql PyPI...

EUVD-2025-7048

Malicious code in bioql PyPI...

EUVD-2025-6631

Malicious code in bioql PyPI...

EUVD-2024-45879

Malicious code in bioql PyPI...

Malicious code in openai-airline-agentsdk-demo-3w (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-47702 Malicious code in openai-airline-agentsdk-demo-3w (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-59434 Critical Multi-Tenant Variable Disclosure in Flowise Cloud via Custom JavaScript Function

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to August 2025 Cloud-Hosted Flowise, an authenticated vulnerability in Flowise Cloud allows any user on the free tier to access sensitive environment variables from other tenants via the Custom JavaScri...

CVE-2025-59434

Flowise Cloud prior to August 2025 was vulnerable to a cross-tenant data exposure through the Custom JavaScript Function node, allowing authenticated users on the free tier to access environment variables from other tenants (e.g., OpenAI keys, cloud credentials, and tokens). The issue has been pa...

PT-2025-39070

Name of the Vulnerable Software and Affected Versions Flowise versions prior to August 2025 Cloud-Hosted Flowise Description Flowise is a drag & drop user interface used to build customized large language model flows. A vulnerability in Flowise Cloud, prior to the August 2025 release, allows...

Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell

Cybersecurity researchers have discovered what they say is the earliest example known to date of a malware that bakes in Large Language Model LLM capabilities. The malware has been codenamed MalTerminal by SentinelOne SentinelLABS research team. The findings were presented at the LABScon 2025...

ShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research Agent

Cybersecurity researchers have disclosed a zero-click flaw in OpenAI ChatGPT's Deep Research agent that could allow an attacker to leak sensitive Gmail inbox data with a single crafted email without any user action. The new class of attack has been codenamed ShadowLeak by Radware. Following...